AWS log group subscriptions

Control which Amazon CloudWatch log groups Better Stack ingests for an aws source. These endpoints manage per-log-group subscription overrides. To subscribe every newly discovered log group automatically, set aws_auto_sub_log_groups when you update the source.

Connect your AWS account first

These endpoints apply to aws sources with an AWS account connected. See Connect source to your AWS account.

An override records the desired state for one log group, identified by its region and name. Set subscribed to true to ingest the log group or false to skip it. An override takes precedence over the source's auto-subscribe setting, and you can create one before the log group is discovered. Delete the override to return the log group to automatic behavior.

List log group subscriptions

Returns the log group subscription overrides for an aws source.

GET https://telemetry.betterstack.com/api/v2/sources/{source_id}/aws-log-group-subscriptions

URL parameters

source_id

required string

ID of the aws source

Query parameters

page

integer

Page number

per_page

integer

Number of subscriptions per page. Default 50, maximum 250.

Headers

Authorization

required string

Bearer $TOKEN

200

Returns a paginated list of log group subscription overrides.

Response body

{
  "data": [
    {
      "id": "1",
      "type": "aws_log_group_subscription",
      "attributes": {
        "region": "us-east-1",
        "name": "/aws/lambda/checkout",
        "subscribed": true,
        "created_at": "2026-08-19T12:30:41.695Z",
        "updated_at": "2026-08-19T12:30:41.695Z"
      }
    }
  ],
  "pagination": {
    "first": "https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions?page=1&per_page=10",
    "last": "https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions?page=1&per_page=10",
    "prev": null,
    "next": null
  }
}

Response attributes

string

The ID of the log group subscription override.

type

string

The resource type, always aws_log_group_subscription.

attributes.region

string

The AWS region of the log group, for example us-east-1.

attributes.name

string

The name of the CloudWatch log group.

attributes.subscribed

boolean

Whether Better Stack ingests the log group.

attributes.created_at

string

When the override was created, as an ISO 8601 date-time in UTC.

attributes.updated_at

string

When the override was last updated, as an ISO 8601 date-time in UTC.

pagination.first

string

URL of the first page. Read more about pagination.

pagination.last

string

URL of the last page.

pagination.prev

string or null

URL of the previous page, or null on the first page.

pagination.next

string or null

URL of the next page, or null on the last page.

Example cURL

List log group subscriptions

Copied!

curl --request GET \
  --url https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions \
  --header "Authorization: Bearer $TOKEN"

Create a log group subscription

Creates an override that subscribes or unsubscribes one log group.

POST https://telemetry.betterstack.com/api/v2/sources/{source_id}/aws-log-group-subscriptions

URL parameters

source_id

required string

ID of the aws source

Headers

Authorization

required string

Bearer $TOKEN

Body parameters

region

required string

AWS region of the log group, for example us-east-1.

name

required string

Name of the CloudWatch log group, for example /aws/lambda/checkout.

subscribed

required boolean

Whether to ingest this log group. Set to true to subscribe or false to skip it.

201

The subscription override was created.

Response body

{
  "data": {
    "id": "1",
    "type": "aws_log_group_subscription",
    "attributes": {
      "region": "us-east-1",
      "name": "/aws/lambda/checkout",
      "subscribed": true,
      "created_at": "2026-08-19T12:30:41.695Z",
      "updated_at": "2026-08-19T12:30:41.695Z"
    }
  }
}

422

An override already exists for this region and log group name.

Response body

{
  "errors": [
    "Name has already been taken"
  ],
  "invalid_attributes": [
    "name"
  ]
}

Example cURL

Create a log group subscription

Copied!

curl --request POST \
  --url https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions \
  --header "Authorization: Bearer $TOKEN" \
  --header "Content-Type: application/json" \
  --data '{
    "region": "us-east-1",
    "name": "/aws/lambda/checkout",
    "subscribed": true
  }'

Get a single log group subscription

Returns one log group subscription override.

GET https://telemetry.betterstack.com/api/v2/sources/{source_id}/aws-log-group-subscriptions/{id}

URL parameters

source_id

required string

ID of the aws source

required string

ID of the log group subscription override

Headers

Authorization

required string

Bearer $TOKEN

200

Returns the log group subscription override.

Response body

{
  "data": {
    "id": "1",
    "type": "aws_log_group_subscription",
    "attributes": {
      "region": "us-east-1",
      "name": "/aws/lambda/checkout",
      "subscribed": true,
      "created_at": "2026-08-19T12:30:41.695Z",
      "updated_at": "2026-08-19T12:30:41.695Z"
    }
  }
}

404

The source has no subscription override with the given ID.

Response body

{
  "errors": "Resource with provided ID was not found"
}

Response attributes

string

The ID of the log group subscription override.

type

string

The resource type, always aws_log_group_subscription.

attributes.region

string

The AWS region of the log group, for example us-east-1.

attributes.name

string

The name of the CloudWatch log group.

attributes.subscribed

boolean

Whether Better Stack ingests the log group.

attributes.created_at

string

When the override was created, as an ISO 8601 date-time in UTC.

attributes.updated_at

string

When the override was last updated, as an ISO 8601 date-time in UTC.

Example cURL

Get a log group subscription

Copied!

curl --request GET \
  --url https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions/1 \
  --header "Authorization: Bearer $TOKEN"

Update a log group subscription

Subscribes or unsubscribes an existing override.

PATCH https://telemetry.betterstack.com/api/v2/sources/{source_id}/aws-log-group-subscriptions/{id}

URL parameters

source_id

required string

ID of the aws source

required string

ID of the log group subscription override

Headers

Authorization

required string

Bearer $TOKEN

Body parameters

subscribed

required boolean

Whether to ingest this log group. Set to true to subscribe or false to skip it.

200

The subscription override was updated.

Response body

{
  "data": {
    "id": "1",
    "type": "aws_log_group_subscription",
    "attributes": {
      "region": "us-east-1",
      "name": "/aws/lambda/checkout",
      "subscribed": false,
      "created_at": "2026-08-19T12:30:41.695Z",
      "updated_at": "2026-08-19T13:05:12.104Z"
    }
  }
}

404

The source has no subscription override with the given ID.

Response body

{
  "errors": "Resource with provided ID was not found"
}

Example cURL

Update a log group subscription

Copied!

curl --request PATCH \
  --url https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions/1 \
  --header "Authorization: Bearer $TOKEN" \
  --header "Content-Type: application/json" \
  --data '{
    "subscribed": false
  }'

Delete a log group subscription

Removes the override and returns the log group to automatic behavior.

DELETE https://telemetry.betterstack.com/api/v2/sources/{source_id}/aws-log-group-subscriptions/{id}

URL parameters

source_id

required string

ID of the aws source

required string

ID of the log group subscription override

Headers

Authorization

required string

Bearer $TOKEN

204

The subscription override was deleted.

404

The source has no subscription override with the given ID.

Response body

{
  "errors": "Resource with provided ID was not found"
}

Example cURL

Delete a log group subscription

Copied!

curl --request DELETE \
  --url https://telemetry.betterstack.com/api/v2/sources/95/aws-log-group-subscriptions/1 \
  --header "Authorization: Bearer $TOKEN"

Connect source to your GCP project

List all collectors

Explore documentation

AWS log group subscriptions

Connect your AWS account first

List log group subscriptions

Example cURL

Create a log group subscription

Example cURL

Get a single log group subscription

Example cURL

Update a log group subscription

Example cURL

Delete a log group subscription

Example cURL

On this page

Explore documentation

AWS log group subscriptions

Connect your AWS account first

List log group subscriptions

Example cURL

Create a log group subscription

Example cURL

Get a single log group subscription

Example cURL

Update a log group subscription

Example cURL

Delete a log group subscription

Example cURL

On this page

Please accept cookies